robinminto / reactxss

An XSS smoke test for ReactJS

Deployment and test

Share the dist/ directory utilising any popular web server. To build the latest exploit list:

wget https://www.owasp.org/index.php/XSS_Filter_Evasion_Cheat_Sheet
./extract.rb > dist/sploits.json

To build the javascript:

npm install
gulp

More information

See this blog post:

https://lolware.net/2015/08/19/reactjs-xss-testing.html